TI-2026-54488 CVE-2026-78325 · GHSA-3799-7g8h-9xh6
XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import
Priority LOW 31
Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a cra…